Ransomware poses a completely unique set of challenges. Arguably, it is one of the most versatile of malware types. We saw it, initially, simply as a means of extorting ransoms from victims in order to get their encrypted files back. Not satis-fied with that, the adversary has adapted ransomware techniques to other purposes. For example, we have seen ransomware used for extortion in other ways. In one case, the ransomware did not extort the usual bitcoins. Rather it extracted information as the "ransom" in order get files decrypted. In another case, we saw no ransom demanded. The adversary simply destroyed all of the critical documents on the target. This is sometimes used as an act of political manipulation and sometimes for revenge of some sort.
展开▼
